Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/z9pY0mNZw1275Un36HrGri4KO4o.roa
File: z9pY0mNZw1275Un36HrGri4KO4o.roa (raw, json)
Hash identifier: YWMIyf15z9zL0EObbho/vFT6JF3XUpar4rPteqovYLo=
Subject key identifier: CF:DA:58:D2:63:59:C3:5D:BB:E5:49:F7:E8:7A:C6:AE:2E:0A:3B:8A
Certificate issuer: /CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba
Certificate serial: 019425FD5DAE6316FCB3CF7E2DBCBF21FB7D
Authority key identifier: A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/z9pY0mNZw1275Un36HrGri4KO4o.roa
Signing time: Thu 02 Jan 2025 07:49:09 +0000
ROA not before: Thu 02 Jan 2025 07:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5588
IP address blocks: 5.56.33.0/24 maxlen: 24
5.56.37.0/24 maxlen: 24
5.56.38.0/24 maxlen: 24
2a01:47c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:5d:ae:63:16:fc:b3:cf:7e:2d:bc:bf:21:fb:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba
Validity
Not Before: Jan 2 07:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfda58d26359c35dbbe549f7e87ac6ae2e0a3b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:af:85:79:c5:37:e0:1c:0f:45:e2:c3:09:25:
35:26:8e:18:1d:3a:7b:24:f9:6f:ad:61:ec:50:1d:
83:ee:e5:34:f7:d3:67:53:68:76:f3:a9:5d:49:87:
a2:19:9b:a2:df:30:a4:d7:b3:01:c2:49:3d:f0:00:
fa:1a:5e:1f:fd:be:fe:75:35:0b:e0:92:4b:7b:f3:
69:04:81:78:e7:02:ad:6b:d6:05:f4:bd:55:9f:c9:
10:cd:93:32:08:37:6c:19:60:1f:ee:db:27:82:22:
26:dd:1b:48:94:5b:55:59:98:b3:d8:c9:57:8e:bb:
d5:a2:b8:e0:69:31:1b:22:78:ea:d6:4f:b5:af:82:
b5:7d:c2:c3:fc:10:bc:2e:54:d5:a1:7d:3e:df:32:
f4:93:79:3b:f4:8f:4f:7f:d1:1e:30:60:94:92:e8:
61:fc:c8:8c:d6:e9:7d:b4:ac:97:f0:e1:91:07:3a:
31:3c:46:46:16:09:ec:26:4e:0a:eb:cb:73:28:0f:
e5:d9:3d:f8:34:4e:e9:f8:95:e5:f1:0c:18:05:ff:
94:fe:22:04:b8:bc:57:ce:d0:7a:01:9c:78:aa:01:
e7:e6:ec:9f:cb:6c:93:87:77:b6:8a:69:f9:44:8b:
e6:2b:a7:20:d0:db:58:20:3a:45:9b:41:4f:8a:4b:
1c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DA:58:D2:63:59:C3:5D:BB:E5:49:F7:E8:7A:C6:AE:2E:0A:3B:8A
X509v3 Authority Key Identifier:
keyid:A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/z9pY0mNZw1275Un36HrGri4KO4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.33.0/24
5.56.37.0-5.56.38.255
IPv6:
2a01:47c0::/32
Signature Algorithm: sha256WithRSAEncryption
c4:48:aa:61:b8:e2:38:f3:e8:2f:43:b8:20:58:b4:aa:4f:09:
54:0f:98:98:1a:01:ea:f5:cb:0c:ba:3b:a7:89:37:c7:d4:8c:
a2:1a:59:c5:3a:e0:ab:6a:c8:1d:a2:5b:2c:03:2b:76:25:be:
e5:15:7e:bb:f1:20:d8:70:6e:e1:ae:5e:85:95:7e:af:a3:f3:
df:98:71:36:5d:6c:74:48:7c:e6:de:03:bb:5c:5c:f3:1b:62:
b1:57:be:1b:8b:a8:16:a6:e6:8b:ba:ef:e1:2b:b1:19:e3:2e:
19:6a:30:f7:67:4a:cd:51:fe:4b:e2:42:49:8e:69:5e:ca:3a:
70:31:72:62:16:df:46:e2:51:36:61:2c:6f:cf:5f:79:95:c4:
61:aa:a5:d5:1c:03:ee:69:7b:ac:32:e7:57:5d:c6:4f:a5:72:
57:19:bb:81:75:38:19:ae:6d:25:28:e1:f9:91:fe:0c:36:13:
73:33:21:0d:e6:dd:e8:af:cd:b1:bb:ee:cc:bf:39:89:3a:6b:
f4:9a:ec:96:32:e8:1e:58:2d:06:a6:87:60:66:42:4f:c9:cb:
10:08:36:e5:56:ba:47:91:3c:44:ff:d1:9d:a4:cd:c1:3b:b6:
c6:bc:dc:60:fa:7c:09:b4:af:74:5b:c6:8c:15:64:98:fb:94:
92:99:3f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:33:56 2025 by rpki-client